Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3b212e-99ea-437f-8284-aae55df5f2b3.roa
File: 0f3b212e-99ea-437f-8284-aae55df5f2b3.roa (raw, json)
Hash identifier: +LcbDl/18YgZksICV7um1+FBjvT9PwtD7AdJRMvkgpQ=
Subject key identifier: EA:50:6A:C7:5F:46:99:71:61:F2:34:98:85:3A:F7:50:DD:FA:0C:2D
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 113654307E3A1DAB13A565137F04ACB3BECAE9D5
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3b212e-99ea-437f-8284-aae55df5f2b3.roa
Signing time: Tue 19 Nov 2024 00:00:00 +0000
ROA not before: Tue 19 Nov 2024 00:00:00 +0000
ROA not after: Tue 24 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d07c:4000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:36:54:30:7e:3a:1d:ab:13:a5:65:13:7f:04:ac:b3:be:ca:e9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Nov 19 00:00:00 2024 GMT
Not After : Dec 24 23:59:59 2024 GMT
Subject: serialNumber=6ec1ec98730a41e7983499384eb481de5e0562f0d08dafbc2181f293f19225a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:57:cb:9f:79:65:f7:96:3f:18:ef:25:9d:
20:74:99:bd:7d:0e:84:db:cb:27:10:e6:6f:78:08:
37:66:81:93:f7:59:43:d3:f0:fc:ae:86:d9:79:9c:
6f:e2:dc:f7:8b:29:82:37:dc:63:6f:be:23:33:e2:
f1:dd:04:fa:b6:ee:26:77:3c:36:da:38:a4:fc:bb:
c9:82:30:bc:86:82:8e:0a:8a:9b:8a:91:ee:f6:4c:
a3:3f:c1:7d:9b:da:aa:30:59:18:6e:8c:65:f2:41:
26:f0:4a:37:0c:28:cf:78:81:62:af:3e:91:b7:6c:
a5:60:12:a1:62:4d:1c:b8:5b:cd:1c:64:85:d8:73:
dc:95:93:8a:ef:a5:3e:71:86:01:78:1e:cb:e6:26:
b8:95:9f:af:aa:b5:7e:05:05:02:98:07:a2:e5:2e:
75:86:24:4b:3d:8f:0b:58:dc:e2:1d:12:93:bd:75:
77:f6:e1:a0:42:5f:ea:f4:ab:9e:7d:a1:2f:09:5d:
4b:56:8d:3f:07:ae:98:d8:cf:36:66:c8:73:e7:65:
8c:06:0e:3a:99:33:b4:8f:c1:1e:29:68:b3:fc:f3:
9a:ed:a6:a9:a7:50:04:ff:16:6c:d8:47:5d:63:06:
03:af:9d:82:71:a2:f9:47:bd:88:a5:d1:bd:86:f6:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:50:6A:C7:5F:46:99:71:61:F2:34:98:85:3A:F7:50:DD:FA:0C:2D
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f3b212e-99ea-437f-8284-aae55df5f2b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d07c:4000::/40
Signature Algorithm: sha256WithRSAEncryption
02:d0:99:ec:fd:1d:f1:8c:39:bb:db:7f:57:ba:7c:6b:3b:5d:
8d:b4:46:9d:0e:92:4e:50:2e:99:bb:2b:e4:c4:02:bb:60:58:
b3:21:3e:2f:6b:8b:df:5b:78:47:7d:85:58:84:ca:88:e3:1e:
87:fd:24:d2:a0:de:c3:09:17:7f:5f:d6:2d:4f:72:c0:1f:7f:
bc:0c:03:4b:e9:3b:37:35:3d:09:12:6c:94:4f:48:05:29:89:
9a:ff:2a:95:58:44:04:72:33:f1:45:59:66:9c:70:78:49:fe:
50:da:c2:a3:98:62:96:fc:51:cc:9c:23:d9:bd:3a:70:d0:79:
6c:6a:da:2d:55:e8:fa:c0:86:36:10:38:0a:62:a7:69:06:c5:
49:c4:d9:8d:6b:60:ae:40:bd:e4:cd:4b:82:a2:d3:d0:16:9b:
59:6d:e6:2e:af:1d:e2:f2:72:0b:5a:ec:39:4a:43:f6:e0:41:
2a:24:57:6f:1a:9d:f6:d0:62:30:c9:b2:f7:87:f6:ff:6f:15:
66:c2:11:1e:99:08:7d:3d:bc:78:be:ba:cb:83:9d:b7:c4:ee:
47:70:0a:6b:0c:78:f5:f6:ef:d4:fb:af:f8:91:b3:1d:51:76:
c6:76:e5:a2:00:2c:a3:26:7a:16:5b:27:4a:1c:7e:06:7b:0b:
c3:10:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:37 2024 by rpki-client on console-fra.rpki-client.org